Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iYI-CyNKGopeP9Y98-3lQFLpoWE.roa
File: iYI-CyNKGopeP9Y98-3lQFLpoWE.roa (raw, json)
Hash identifier: RjCNzpAIjTSvXxyd/P8qfgApws3oRmrE/ua3oROeXCM=
Subject key identifier: 89:82:3E:0B:23:4A:1A:8A:5E:3F:D6:3D:F3:ED:E5:40:52:E9:A1:61
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019015288154A7C61EBFDE7451F2DCADF827
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iYI-CyNKGopeP9Y98-3lQFLpoWE.roa
Signing time: Fri 14 Jun 2024 05:11:34 +0000
ROA not before: Fri 14 Jun 2024 05:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 14 Jun 2024 06:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:28:81:54:a7:c6:1e:bf:de:74:51:f2:dc:ad:f8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 14 05:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89823e0b234a1a8a5e3fd63df3ede54052e9a161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:f4:82:7a:bb:7e:d7:03:f2:3d:97:ba:89:
47:69:08:38:4e:bf:a3:7f:7d:9c:3f:62:0e:32:4f:
b4:ff:8b:44:82:ba:dc:29:ae:44:58:72:a3:df:43:
dd:15:a0:98:31:f3:4c:b6:84:8e:b8:87:7b:ec:69:
93:2c:15:eb:15:62:4c:48:73:0e:0d:78:60:16:25:
f2:62:cb:00:18:df:3b:fd:78:50:3a:49:8a:83:c8:
85:35:5a:57:96:c9:b0:58:75:7e:a3:3a:ed:8c:62:
90:a7:cc:ae:90:48:df:b3:47:f5:39:9f:45:93:90:
b4:20:fb:ae:4a:57:f0:ff:f4:f7:d2:c1:14:f9:8a:
c3:48:36:4f:e7:6d:01:ae:aa:df:19:f4:bd:3c:fa:
3c:2c:60:8e:21:3f:f4:ec:07:9e:38:cd:2d:7c:7e:
ca:3b:2d:17:f7:8a:ec:35:6e:78:56:46:6f:ae:df:
d4:9e:8c:35:dc:17:8e:14:6f:a5:0e:ec:68:bf:c6:
8d:de:ab:f3:05:71:f5:a8:8e:3d:88:69:d9:02:61:
67:2e:54:45:fe:ec:a6:84:f7:67:ce:55:88:52:20:
b1:a0:bb:0a:c7:4a:1f:c2:ec:5a:29:a2:a6:f4:f7:
30:55:a4:7b:a3:3e:64:60:74:04:68:3f:57:ce:51:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:3E:0B:23:4A:1A:8A:5E:3F:D6:3D:F3:ED:E5:40:52:E9:A1:61
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/iYI-CyNKGopeP9Y98-3lQFLpoWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:f6:21:42:82:3f:ca:66:ac:df:86:74:ab:10:b0:53:bb:38:
d1:0c:23:bf:9a:f4:2e:0e:a5:f3:83:b4:f3:8e:ba:39:e7:be:
e0:7a:9a:fa:34:46:03:f6:b4:ba:c1:b4:99:d4:8f:7a:32:97:
0b:8c:be:e2:44:3d:a0:5a:8d:1a:8e:bf:df:0f:70:68:55:a6:
39:1e:dc:24:fa:4d:32:d4:90:ec:8e:49:0a:8f:51:eb:80:23:
c6:3d:89:8e:31:14:3f:21:5d:bb:f9:c9:e9:c8:43:6b:d1:42:
8c:08:78:af:ad:78:a0:1b:ac:ae:f9:42:de:64:c9:8b:cb:82:
3e:d6:03:85:44:34:96:1c:ea:d0:e6:23:2d:ae:dc:55:ce:cd:
42:64:e2:74:0c:71:be:20:6b:d9:29:3f:36:bd:fa:19:b9:ec:
94:53:a7:18:30:3d:10:db:39:a9:ba:6a:7b:ec:b2:60:5d:4d:
d3:77:85:b9:50:e2:19:d9:85:45:f5:d7:b9:11:2e:33:b1:25:
67:54:97:44:a4:f2:27:d5:be:eb:fa:a7:44:1e:a0:6d:eb:76:
7c:34:1f:65:83:38:4f:12:a7:a8:ea:07:2e:7a:33:01:88:72:
84:2b:8b:6c:6e:e9:ef:d4:4f:1a:de:ba:7b:66:ff:0b:d9:0f:
dd:be:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:08 2024 by rpki-client on console-fra.rpki-client.org